HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Gannett Company, Inc.

bd_9c363ad3fa310287 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 22, 2026

To disclose

—

Affected

1state residents only

Confidence

67%

Full breach record for Gannett Company, Inc. →3 incidents on file

Gannett Satellite Information Network, LLC notified Massachusetts residents via a state-AG notice dated July 22, 2026, regarding a payroll fraud incident. The breach involved unauthorized attempts to change payroll direct deposit details, resulting in the potential exposure of names and Social Security numbers. The company investigated, confirmed the changes were not completed, and offered 24 months of credit monitoring. No specific discovery or occurrence dates were provided.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 22, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Gannett Company, Inc.
norm: gannett

Name: Gannett Company, Inc.
norm: gannett
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Jul 22, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Investigated and took steps to prevent the issue from happening again
Confirmed that the attempted payroll direct deposit changes were not completed
Assessed the Information potentially involved
Offering you twenty-four (24) months of IDX Identity credit monitoring and identity protection services at no cost to you
Changes made: Confirmed that the attempted payroll direct deposit changes were not completed
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1199-gannett-satellite-information-network-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2026
Raw hash: c416a0c844dabafb06de2dc43fd61fcdca44999b5662ad9be3e7491d8000145d

Reporting entityGannett Company, Inc.

Victim entityGannett Company, Inc.

IncidentUnauthorized Access

Stated responseInvestigated and took steps to prevent the issue from happening again

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov